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IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

1. (Currently Amended) A device information generating device comprising: 

a device key matrix storage unit configured to store a device key matrix in which 
device keys are arranged in a two dimensional manner; and 

a device key selecting g e n e rating unit configured to select on e of th e device keys 
according to a device ID. each device key being selected from device keys in each one 
dimensional array of the device key matrix according to each numeral of a device ID[[,]] j and 

wh e r e in th e s e l e ct e d d e vic e k e ys and th e d e vic e ID ar e th e d e vic e informatio n a 
device information generating unit configured to generate a device information based on the 
selected device keys and the device ID . 

2. (Currently Amended) The device information generating device according to claim 
1, wherein said device key generating unit selects on e of a device key from the device keys in 
each row of the device key matrix according to each numeral of the device ID. 

3. (Currently Amended) The [[A]] device information generating device according to 
claim 1 a wherein said device information generating unit calculates a path function value 
based on the selected device key, the path function indicating a path of the device ID in a tree 
formed of all possible combinations of the numerals forming the device ID comprising: 

a device key matrix storage unit configured to store a device key matrix in which 
d e vic e keys ar e arrang e d in a two dim e nsional mann e r; 
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a d e vic e k e y g e n e rating unit configur e d to select one of th e devic e keys in each one 
dimensional array of the device key matrix according to e ach numeral of a device ID; and 

a path function calculating unit configured to calculat e a path function valu e bas e d on 
th e s e l e ct e d d e vic e k e ys, th e path function indicating a path of th e d e vic e ID in a tr ee form e d 
of all possible combinations of the num e ral s forming the d e vic e ID, 

wh e r e in path function valu e and th e devic e ID are th e d e vice information . 

4. (Currently Amended) The device information generating device according to 
claim 3, wherein said device key selecting gen e rating unit selects one of a device key from 
the device keys in each row of the device key matrix according to each numeral of the device 
ID. 

5. (Original) A revoke control data generating device comprising: 

a device key matrix storage unit configured to store a device key matrix in which 
device keys are arranged in a two dimensional manner; 

a device key generating device configured to select one of the device keys in each one 
dimensional array of the device key matrix according to each numeral of a device ID; 

an encrypting unit configured to encrypt the selected device keys by a master key; and 

a revoke control data generating unit configured to generate revoke control data 
including an output of said encrypting unit and a path function indicating a path of the device 
ID to be revoked in a tree formed of all possible combinations of the numerals forming a 
device ID. 
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6. (Original) The revoke control generating device according to claim 5, wherein said 
device key generating device selects one of device keys in each row of the key matrix 
according to each numeral of the device ID. 

7. (Original) A content utilizing device comprising: 

a device information storing unit configured to store a device information including 
an arrangement of device keys and a device ID; 

a key decrypting unit configured to receive revoke control data including encrypted 
data keys which are encrypted by a master key and decrypt the encrypted data keys to obtain 
the master key; and 

a content decrypting unit configured to receive content data which is encrypted by the 
data keys and decrypt the encrypted content data using the master key, wherein if the device 
information is included in the received revoke control data, the content utilizing device is 
revoked such that the key decrypting unit does not obtain the master key. 

8. (Original) The content utilizing device according to claim 7, wherein said revoke 
control data comprises a path function indicating a path of the device ID in a tree formed of 
all possible combinations of the numerals forming the device ID. 

9. (Original) A device information generating method comprising: 

selecting one of device keys in a device key matrix in which device keys are arranged 
in a two dimensional manner in each one dimensional array of the device key matrix 
according to each numeral of a device ID, wherein the selected device keys and the device ID 
are the device information. 
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10. (Original) The device information generating method according to claim 9, 
wherein one of the device keys in each row of the device key matrix is selected according to 
each numeral of the device ID. 

11. (Original) A device information generating method comprising: 

selecting one of device keys in a device key matrix in which device keys are arranged 
in a two dimensional manner in each one dimensional array of the device key matrix 
according to each numeral of a device ID; and 

calculating a path function value based on the selected device keys, the path function 
indicating a path of the device ID in a tree formed of all possible combinations of the 
numerals forming the device ID, 

wherein path function value and the device ID are the device information. 

12. (Original) The device information generating method according to claim 11, 
wherein one of the device keys in each row of the key matrix is selected according to each 
numeral of the device ID. 

13. (Original) A revoke control data generating method comprising: 

selecting one of device keys in a device key matrix in which device keys are arranged 
in a two dimensional manner in each one dimensional array of the device key matrix 
according to each numeral of a device ID; 

encrypting the selected device keys by a master key; and 

generating revoke control data including the encrypted-selected device keys and a 
path function indicating a path of the device ID to be revoked in a tree formed of all possible 
combinations of the numerals forming a device ID. 
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14. (Original) The revoke control generating method according to claim 13, wherein 
one of the device keys in each row of the key matrix is selected according to each numeral of 
the device ID. 

15. (Original) A content utilizing method comprising: 

receiving revoke control data including encrypted data keys which are encrypted by a 
master key and decrypting the encrypted data keys to obtain the master key; and 

receiving content data which is encrypted by data keys stored in a content utilizing 
device and decrypting the encrypted content data using the master key, wherein if device 
information formed of a device information including an arrangement of the device keys and 
a device ID is included in the received revoke control data, the content utilizing device is 
revoked such that the encrypted data keys are not decrypted. 

16. (Original) The content utilizing method according to claim 15, wherein said 
revoke control data comprises a path function indicating a path of the device ID in a tree 
formed of all possible combinations of the numerals forming the device ID. 

17. (Original) An article of manufacture comprising a computer usable medium 
having computer readable program code means embodied therein, the computer readable 
program code means comprising: 

computer readable program code means for causing a computer to select one of 
device keys in a device key matrix in which device keys are arranged in a two dimensional 
manner in each one dimensional array of the device key matrix according to each numeral of 
a device ID; 
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computer readable program code means for causing a computer to encrypt the 
selected device keys by a master key; and 

computer readable program code means for causing a computer to generate revoke 
control data including the encrypted-selected device keys and a path function indicating a 
path of the device ID to be revoked in a tree formed of all possible combinations of the 
numerals forming a device ID. 
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